Ticket #48316: 48316-fix.diff

wp-includes/functions.php

@@ -2309 +2309 @@
          */
         if ( defined( 'UPLOADS' ) && ! ( is_multisite() && get_site_option( 'ms_files_rewriting' ) ) ) {
                 $dir = ABSPATH . UPLOADS;
+                if ( 0 === strpos( UPLOADS, '../' ) AND realpath( ABSPATH . UPLOADS ) ) {
+                        $dir = realpath( ABSPATH . UPLOADS );
+                }
                 $url = trailingslashit( $siteurl ) . UPLOADS;
         }